Releasing Packages with a Valet Key: NPM, PyPI, and Beyond (byk.im)

1 points by BYK 7mo ago ↗ HN

1 comment

[ 2.7 ms ] story [ 12.5 ms ] thread

BYK 7mo ago ↗

How we built a secure, auditable, and low-friction release system at Sentry that is resistant to supply-chain attacks like Shai-Hulud